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WHAT IS CLAIMED IS: 

1. A cryptography accelerator, comprising: 
an input port configured to receive a data sequence 
comprising header information and payload information from an 
entity external to the cryptography accelerator; 

a shared input buffer associated with a plurality of 
input ports, the shared input buffer configured to hold 
payload information associated with the data received by the 
plurality of input ports; and 

a security association lookup unit configured to 
identify a security association address in a first portion of 
the address space associated with the cryptography 
accelerator by using header information, the first portion of 
the address space corresponding to bus controller memory, 
wherein the security association lookup unit is operable to 
acquire the security association information from bus 
2 0 controller memory. 



2. The cryptography accelerator of claim 1, wherein 
the security association lookup unit identifies the security 
association address using header information associated with 
the received data sequence. 
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3, The cryptography accelerator of claim 2, wherein 
the security association lookup unit identifies the security 

30 association address by performing a hash on the header 
information. 

4. The cryptography accelerator of claim 2, wherein 
22 the security association lookup unit identifies the security 
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association address by performing a hash using a source 
address, a destination address, a SPI, a source port number, 
and a destination port n\imber. 

5 

5. The cryptography accelerator of claim 4, wherein 
the hash further uses protocol information and a version 
number, 

10 

6. The cryptography accelerator of claim 1, wherein 
the first portion of the address space is a HyperTransport 
address space. 

15 

7. The cryptography accelerator of claim 1, wherein 
the first portion of the address space is a Peripheral 
Components Interface (PCI) address space. 

20 8. The cryptography accelerator of claim 7, wherein a 

second portion of the address space corresponds to a system 
memory address space, the random access memory coupled to a 
CPU external to the cryptography accelerator . 

25 

9. The cryptography accelerator of claim 8, wherein a 
third portion of the address space corresponds to onchip 
memory . 

30 10. The cryptography accelerator of claim 9, wherein 

obtaining security association information from a bus memory 
entails more delay than obtaining security association 
information from system memory which entails more delay than 
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obtaining security association information from onchip 
memory . 

5 11. The cryptography accelerator of claim 10, wherein 

delay associated with obtaining security association 
information is managed by holding payload information in the 
shared buffer. 
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